| | CVE-2024-2700 | This is an issue where some development environment variables are persisted into the production code. However, we do not set quarkus prefixed environment variables in our build system so this does not apply to our product. | To remove the false positive, this library will be updated in due course. | | CVE-2024-32007 | We do not use the vulnerable functionality in the Apache CFX library. | To remove the false positive, this library will be updated in due course. |